Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'IRCCloud' disclosed a bug submitted by b'cliffordtrigo' 
b'Sign up CSRF'

14 May 2014

b'IRCCloud' disclosed a bug submitted by b'robin' 
b'HTML Form without CSRF protection'

14 May 2014

b'IRCCloud' disclosed a bug submitted by b'internetwache' 
b'CSRF - Creating accounts'

14 May 2014

b'IRCCloud' disclosed a bug submitted by b'reporter' 
b'Dangerous Persistent xss'

13 May 2014

b'IRCCloud' disclosed a bug submitted by b'ashesh' 
b'"SESSION" Cookie without HttpOnly flag set'

11 May 2014
wont-fix

b'Localize' disclosed a bug submitted by b'reactors08' 
b'XSS in password'

11 May 2014

b'ReddAPI' disclosed a bug submitted by b'simon90' 
b'Login page password-guessing attack'

09 May 2014

b'Khan Academy' disclosed a bug submitted by b'internetwache' 
b'Possible clickjacking at shop.khanacademy.org'

08 May 2014
wont-fix

b'Khan Academy' disclosed a bug submitted by b'internetwache' 
b'CSRF - Adding/Removing items to cart - shop.khanacademy.org'

08 May 2014
wont-fix

b'C2FO' disclosed a bug submitted by b'exploitprotocol' 
b'c2fo.com is releasing sensitive Information about Database Configuration.'

08 May 2014

b'Yahoo!' disclosed a bug submitted by b'jeroldcamacho' 
b'XSS Vulnerability (my.yahoo.com)'

07 May 2014

b'Coinbase' disclosed a bug submitted by b'bryanstern' 
b'Coinbase Android Security Vulnerabilities'

07 May 2014

b'CloudFlare' disclosed a bug submitted by b'peterjaric' 
b'Security issue with your "bag" script'

07 May 2014

b'InVision' disclosed a bug submitted by b'xss' 
b'Found a Clickjacking in blog.invisionapp.com.'

04 May 2014

b'Slack' disclosed a bug submitted by b'prakharprasad' 
b'Stored XSS in Slackbot Direct Messages'

04 May 2014

b'Coinbase' disclosed a bug submitted by b'mazen160' 
b'Information Disclosure That shows the webroot of CoinBase Server'

04 May 2014
wont-fix

b'OkCupid' disclosed a bug submitted by b'smiegles' 
b'Login destination open redirection'

01 May 2014

b'concrete5' disclosed a bug submitted by b'introvertmac' 
b'Bypass auth.email-domains'

30 Apr 2014

b'Coinbase' disclosed a bug submitted by b'smilez_hapiez' 
b' Cookie missing the HttpOnly flag '

30 Apr 2014
wont-fix

b'Coinbase' disclosed a bug submitted by b'smilez_hapiez' 
b'IFRAME loaded from External Domains '

30 Apr 2014
wont-fix

1 ... 720 721 722 723 724 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM